Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File: jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier: Zb6TBvo/h1nkZJDg9zE5Jz9uC0PD+3+k+t8laiYagDo=
Subject key identifier: 52:A2:89:90:50:23:DF:09:0E:93:BB:F5:90:9B:2C:AC:E8:89:E9:BE
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial: 019A530815991371A69770A1A704846E7916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number: 0721
Signing time: Wed 05 Nov 2025 08:00:30 +0000
Manifest this update: Wed 05 Nov 2025 08:00:30 +0000
Manifest next update: Thu 06 Nov 2025 08:00:30 +0000
Files and hashes: 1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: 7k6bhMrrIw5nLiUhBtSVXed0tQcpvOu7P4k8nW9QA1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:15:99:13:71:a6:97:70:a1:a7:04:84:6e:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Validity
Not Before: Nov 5 08:00:30 2025 GMT
Not After : Nov 6 08:00:30 2025 GMT
Subject: CN=52a289905023df090e93bbf5909b2cace889e9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d8:ac:b9:34:61:9c:29:6d:e5:34:1d:0a:31:
b9:c0:4d:f9:c9:ac:57:ad:e8:9d:98:51:1b:f1:35:
9e:75:90:91:43:ca:8d:89:00:27:24:c4:70:78:67:
b7:57:70:2c:d1:d2:9d:4d:a4:c7:bf:83:88:a4:23:
cb:0d:64:73:29:a6:ff:96:90:d2:78:4f:e4:a4:f0:
15:9f:a4:54:79:17:f7:c0:e2:cb:d0:57:e9:68:e3:
4a:0c:a6:ff:db:54:aa:43:88:83:a2:10:62:c7:64:
37:b0:4c:47:32:e1:1f:fe:d6:3c:6d:0a:8f:a4:a6:
06:d3:d4:3a:91:57:da:b9:df:de:e0:16:87:c4:9b:
96:53:77:dc:b2:77:42:95:92:ff:14:8d:b1:6d:98:
af:fd:e3:46:98:15:bb:07:be:25:f4:d6:ce:97:fb:
20:4b:63:99:b3:5d:00:a4:21:f5:2f:13:ad:39:57:
0a:44:63:ff:55:d9:a7:29:55:5f:bb:8f:94:44:e0:
f5:fe:a8:d4:86:a0:78:cf:3a:cd:6f:35:b4:54:de:
1b:47:aa:48:39:82:f8:3c:2c:1e:6c:73:6a:18:7e:
de:13:44:7b:96:72:ef:60:64:5b:d6:e2:d7:d0:13:
bf:00:40:e2:38:c3:4e:97:17:70:21:7c:63:25:96:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:89:90:50:23:DF:09:0E:93:BB:F5:90:9B:2C:AC:E8:89:E9:BE
X509v3 Authority Key Identifier:
keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:9d:3c:6a:86:3b:23:e4:83:ff:12:b8:d0:93:ab:66:c7:
43:10:e4:b8:71:79:12:bb:ba:9c:46:9a:e2:57:8e:58:79:54:
a7:48:6a:cb:f6:c5:79:12:5e:6c:0a:4a:d1:80:20:99:4e:64:
52:a5:13:92:72:fe:36:44:a6:b5:f5:e2:2d:9c:0e:97:7c:66:
de:1f:ab:ff:3b:d9:a5:1b:60:78:e9:ab:6c:6c:77:35:5c:ce:
5b:5d:fb:21:d7:1d:12:b5:9d:4d:20:30:54:c1:c4:bc:c8:64:
14:1b:a5:8c:0a:29:6a:2f:c0:69:05:a2:87:0f:67:f8:80:54:
df:35:eb:76:52:10:fb:4b:22:49:7d:a6:05:25:33:88:10:08:
74:ca:fa:8f:2d:d1:7e:82:73:cf:b6:67:b4:ad:06:4a:0a:a4:
e3:6a:d6:af:36:75:2b:2a:ff:7b:e7:91:e3:3b:33:6d:bf:59:
e7:f0:13:53:af:ac:46:ac:b5:bb:af:85:3f:bb:81:83:16:8e:
16:aa:00:3b:04:5e:0c:e3:33:ba:8a:a5:51:d1:61:3a:ce:95:
45:9e:58:7b:8d:9a:3d:ba:e7:da:8c:cd:69:91:54:09:86:da:
db:2d:36:c1:0a:72:b4:64:6e:2e:37:5c:5e:e4:8e:a3:f1:7d:
61:da:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:49:32 2025 by rpki-client